Your cart is currently empty!.
You may check out all the available products and buy some in the shop.
Continue ShoppingPrivacy Policy
🔒 Privacy Policy
www.fresh2door.pk (hereinafter referred to as “The Company,” “we,” “us,” or “our”)
Website: www.fresh2door.pk
Effective Date: 7th November, 2025
1. Introduction and Legal Context
The privacy and protection of your personal data are fundamental to us, consistent with
Article 14 of the Constitution of Pakistan which guarantees the right to privacy.
This Policy outlines our practices for handling your information when you engage with us via our
Website, Social Media Pages, or through Meta Ads, ensuring compliance with the
Prevention of Electronic Crimes Act, 2016 (PECA) and adhering to the necessary
data protection standards set forth by the anticipated
Personal Data Protection Bill (PDPB).
By using our services, you consent to the collection, processing, and disclosure of your personal data
as described in this Policy.
2. Personal Data Collected
We collect both Personal Data and Sensitive Personal Data (as defined by the PDPB) to facilitate your
food and grocery orders (fruits, vegetables, meat, dry fruits, organic food) and doorstep delivery.
| Category of Data | Specific Data Elements Collected | Legal Classification (PDPB) | Source of Collection |
|---|---|---|---|
| Contact & Identity Data | Full Name, Email Address, Mobile Phone Number, Delivery Address, CNIC (if required for specific payment/verification). | Personal Data (CNIC is Sensitive Data) | Direct input (Order Form, Registration, Social Media Message) |
| Category of Data | Specific Data Elements Collected | Legal Classification (PDPB) | Source of Collection |
|---|---|---|---|
| Sensitive Transaction Data | Bank Account/Debit/Credit Card details (collected via secure third-party processor), Billing Address. | Sensitive Personal Data | Third-Party Payment Gateway |
| Order Data | Products purchased, quantity, time of order, special instructions (e.g., “leave meat cut,” “preferred ripeness”). | Personal Data (or Transactional Data) | Direct input (Website/Social Media order) |
| Technical & Usage Data | Internet Protocol (IP) address, operating system, browser type, site pages viewed, referring URLs, time and date stamps, social media identifiers. | Personal Data / Traffic Data (PECA) | Automatic tracking (Cookies, Meta Pixel) |
3. Basis and Purpose of Data Processing
Under Pakistani law (including the principles of the PDPB), we process your data only where we have a lawful purpose and a valid legal basis.
| Legal Basis | Purpose of Processing |
|---|---|
| Contractual Necessity | To fulfill your order, deliver products to your specified location, and confirm payments. |
| Legal Basis | Purpose of Processing |
|---|---|
| Legal Obligation | To maintain financial and tax records as required by the Federal Board of Revenue (FBR) and other regulatory bodies. |
| Explicit Consent | To send you promotional emails, market personalized advertisements (via Meta Ads/Pixels), and deploy non-essential cookies. Consent may be withdrawn at any time. |
| Legitimate Interest | To improve and optimize our Website and Service offerings, and to ensure security against fraud and cybercrime (in line with PECA). |
4. Consent Requirements
We adhere strictly to the PDPB’s principle of Explicit Consent.
- For Order Processing: By completing the checkout process, you provide explicit consent for us to use your contact and delivery data to fulfill the order.
- For Sensitive Data: The processing of Sensitive Personal Data (financial details) is strictly for payment purposes via secure gateways.
- For Marketing: We will only use your Personal Data for marketing purposes (e.g., promotional emails, targeted ads) if you provide us with
clear, unambiguous, and affirmative consent (e.g., ticking an un-pre-ticked box).
5. Disclosure and Sharing of Personal Data
We do not sell, rent, or lease your Personal Data. We share data only when necessary to provide the service or when legally mandated, ensuring all recipients are bound by confidentiality obligations.
| Recipient/Third Party | Data Shared | Purpose of Sharing |
|---|---|---|
| Delivery/Logistics Partners | Name, Delivery Address, Phone Number. | To ensure the accurate and timely doorstep delivery of your order. |
| Payment Gateways/Banks | Transaction Data, Financial Data (encrypted). | To authorize and process payments securely. These parties adhere to international security standards. |
| Marketing Platforms (Meta/Google) | Technical Data, Usage Data, Order Data (often pseudonymized). | To run targeted advertising campaigns and measure ad effectiveness. |
| Regulatory & Law Enforcement | Any required data. | To comply with legal proceedings, court orders, or requests under the PECA 2016 or other relevant laws. |
6. Data Subject Rights (as per PDPB Principles)
In line with the principles set out in the PDPB, you have the following rights regarding your Personal Data:
| Your Right | Description & Action |
|---|---|
| Right to Access | You have the right to request access to the Personal Data we hold about you, which we will provide in an intelligible form. |
| Right to Correction/Rectification | You may request the correction of any inaccurate or incomplete Personal Data. |
| Right to Erasure/Deletion | You have the right to request the deletion or removal of your Personal Data when it is no longer necessary for the purposes for which it was collected. |
| Right to Withdraw Consent | You have the right to withdraw your consent to the processing of your Personal Data at any time, especially for marketing. This will not affect the lawfulness of processing done before withdrawal. |
| Right to Data Portability | You may request a copy of your personal data in a structured, commonly used, and machine-readable format. |
To exercise any of these rights, please contact our Data Representative using the contact details provided in Section 9.
7. Security and Data Integrity
We are committed to maintaining the security, integrity, and confidentiality of your Personal Data, in line with PECA’s requirement to protect information systems from unauthorized access.
- Security Measures: We use industry-standard technical and organizational safeguards, including encryption (SSL/TLS), firewalls, access controls, and secure data storage.
- Security Disclaimer: While we implement robust security, you acknowledge that no transmission method over the internet is 100% secure. We cannot guarantee absolute security but will take all reasonable steps to prevent data breaches.
- Breach Notification: In the event of a significant data breach, we will notify the affected data subjects and the relevant Pakistani regulatory body as required by law.
8. Data Retention Policy
We will retain your Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law.
- Transactional Data: Retained for the periods mandated by financial and tax laws in Pakistan.
- Marketing Data: Retained until you withdraw your consent or opt out of marketing communications.
- Data no longer required will be securely destroyed or permanently anonymized.
9. Contact and Grievance Redressal
For any questions, concerns, or to exercise your data rights, please contact our designated Data Representative:
Data Representative: Muzammil Hussain
Email: info@havenway.onehub.pro
Phone: +92 300 4040785